Fake N26 Support Calls Deploy Copybara Android RAT to Control Banking Apps

A new fraud campaign is targeting Android banking users through convincing phone calls that impersonate N26 support staff. The attack begins as voice phishing, but it can end with criminals remotely controlling banking apps on a victim’s phone. Victims are told that their account needs urgent verification or a device certification update. Attackers then guide them to a fake login page, collect credentials, and persuade them to install a malicious Android application outside the official app store. Researchers at d3 Lab identified the malware as Copybara, an Android remote access trojan built to steal data and perform actions through abused accessibility permissions. d3 Lab said in a report shared with Cyber Security News...

Read the full article at the source.